static function deletePasswords(\Db\Connection $db, User $user) {
    if (!$user) {
      throw new \InvalidArgumentException("No user provided.");
    }

    // does such a password already exist?
    $q = $db->prepare("DELETE FROM user_passwords WHERE user_id=?");
    $q->execute(array($user->getId()));

    return true;
  }