I'd change `password` to `newPassword` to make it more explicit that's what it is.