Improve password handling in UserFactory

We want to override _prepare so that passwords can be input as keyword arguments to the create() method:

`UserFactory.create(password='password', [...])`

and they will still be hashed properly when stored in the user.