As a best practice, the creation of a user's password should be managed by the platform. Setting a password programmatically increases security risk and in most circumstances isn't required.