New user's password set to weak password in _user_resource_create()
When creating a new user account via Services, the new user's password was set to a weak password.
This issue is mitigated by the fact that the user resource must be enabled (or least have been enabled in the past) and new user registration permitted via Services.