@Override
public Long create(User user) {
    String hashedPassword = BCrypt.hashpw(user.getPassword(),
        BCrypt.gensalt(BCRYPT_SALT_LOG_ROUNDS));
    user.setPassword(hashedPassword);
    return userDao.create(user);
}

@Override
public User read(Long id) {
    User user = userDao.read(id);
    if (user != null) {
        user.setPassword(null);
    }
    return user;
}