Updated so creating a user uses the safer "reset-password" function