new user form fixes
password