Just a small correction because it feels weird :), on the registration page:

      <input id="user_password" name="user[password]" type="*password*" />