taking in password for user#create
using email instead of username