added password fields to signup and users#create