added NO_PASSWORD instead of passing in NULL since the User object does not allowe NULL for the password.