added password field to user create page