added a concern that sets the password for a user on create