Please see code at dpaste.
I 'm trying to modify my admin site so that the admin can create new accounts there. After clicking save , to whatever email address which the admin has entered an email would bbe sent with a random password. It works perfectly but when I try to change the users permission in the admin site, first of all the password's hash code is visible and the password gets substituted with that hash.
Also why is the password string visible, shouldn't it be dots here?
Please help me out.