Do not set the password in the save() method of User. This should be done in a form or similar.