updated user related functions to accept password arg instea dof pass_hash