breadcrumb2 with password initialization and verification logic up in create_user