Fixed up some User model stuff. When setting a new password for a user,
it should be set at newPassword, not password. Then using
BeforeValidate, newPassword should become encrypted and added to
Password.

Finally, phone and email validation should only happen during the
before create function.