read password without displaying it; display errors

This makes a few modifications to the `create_user` rake task:

1. the password is no longer shown when typed
2. errors about failed user creation are now displayed
3. (important) all errors about failed user creation are now caught, some (all?) were not previously (try creating a duplicate user, or one with a password that is too short)