password and new user signup works