changed toString in User, now don't shows password id and orders