Move password logic to User model