User creation forms should respect use of 'set_password' to update the password.