new_user now asks for username and password rather than generating one