Changed /users POST call parameter comments

replaced "semi-required" description for password field to proper
description.