mod_register_ibr: Use set_password() instead of create_user() for resets Looks like a copy/paste failure? We used to use create_user(), and it still "works", but we will probably tighten that up soon. set_password() is the way to change the password of an existing account.