spec user:create password bug