fix: send password when creating a user