password is encrypted on user creation
test for password encryption on user creation