We can add `createAndLogin` which does both and caches the stretched password in a local var.