existing password, which is to be replaced
new password
if set to true the user will not be able to make changes
user updated