Fix create_user and create_superuser.

    passwords were not set correctly, and superuser was not having is_superuser set.