We shouldn't be calling self.create_user with password=None