Change redirect_url. Keep clear text password
Added first and lastname