Fixed a bug with password token not being assigned to user