added password attribute to userCreate