Users should be able to make PUT/POST requests to the API (with a clear-text password). The API has to encode the password using the Symfony password encoder and then persist it to database.