user resource with password and password_validation