security: change password to plainpassword.

[iamdevvalecha]

under models/user.js:- change line no.61 change
if (!password) return ""; TO if (!plainpassword) return "";