We can now create a user, and update its password

And when updating the password, it is hashed right before saving to the
database.