adding password support; adjusting permissions
adding password requirement to user creation service