You should use the hashPassword function instead of reimplementing the hashing.

This function should either return the new password via a callback or save it in the database using an update operation and then return it via a callback. In both cases you need to return the unhashed password to send it to the user.

What are you trying to achieve by simply assigning it to the this.password field?