fixed bug with create user with secure password