diff --git a/common/models/user.js b/common/models/user.js
index af104e8e39..0806d97e0b 100644
--- a/common/models/user.js
+++ b/common/models/user.js
@@ -8,6 +8,8 @@ module.exports = function(User) {
   // see:
   // https://github.com/strongloop/loopback/issues/1137#issuecomment-109200135
   delete User.validations.email;
+  // set salt factor for passwords
+  User.settings.saltWorkFactor = 5;
   debug('setting up user hooks');
   // send verification email to new camper
   User.afterRemote('create', function(ctx, user, next) {
diff --git a/common/models/user.json b/common/models/user.json
index 7aeca01d1e..8e15a241dc 100644
--- a/common/models/user.json
+++ b/common/models/user.json
@@ -242,5 +242,5 @@
       "property": "doesExist"
     }
   ],
-  "methods": ["login"]
+  "methods": []
 }