UNUSUABLE_PASSWORD has been replaced with UNUSABLE_PASSWORD_PREFIX and
UNUSABLE_PASSWORD_SUFFIX, however, neither of these needs to be used as
by not passing a password to the user create method you get an unusable
password by default.