user signup works and creates unique password, even for same password