The standard user does not pass around the password anymore.
The newly added user type ("PasswordUser") additionally contains the password of a user. This type should only be used in the store to validate a user when signing in. This approach prevents the password (although it is hashed) from getting out in the far far world.