Hard-deprecate password handling in User