new user form should not be bound to usermodel
creating a new user redirects to user details
changes password prompts on user details page