change _form in users to have password_field instead of text_field