Base implementation

`$user->getPassword()` should probably be `$user->getPasswordHash()`