What should password field be?

Are you using user login and registration in a seperate app? If yes then you must use SSO instead of creating users via API.