fix a bug when creating new user by admin, set wrong password