rename userid to id ;remove tracking
remove passwordhash property