You did not specify an order here. Neither did you specify a default scope in UserPassword. So you will receive an arbitrary password (based on the db).