user is created properly but password needs encrypting