refactored new_user_password method