Moves password param to user hash param so that it can be set using the User API.
Authored by: jplang 2010-12-12
Parent: [r4492]
Child: [r4494]