diff --git a/src/routes/cloudron.js b/src/routes/cloudron.js
index 8109a6cec..0afa2a310 100644
--- a/src/routes/cloudron.js
+++ b/src/routes/cloudron.js
@@ -106,7 +106,7 @@ function passwordReset(req, res, next) {
         if (!userObject.username) return next(new HttpError(409, 'No username set'));
 
         // setPassword clears the resetToken
-        users.setPassword(userObject.id, req.body.password, function (error) {
+        users.setPassword(userObject, req.body.password, function (error) {
             if (error && error.reason === BoxError.BAD_FIELD) return next(new HttpError(406, error.message));
             if (error) return next(new HttpError(500, error));
 
@@ -143,7 +143,7 @@ function setupAccount(req, res, next) {
             userObject.displayName = req.body.displayName;
 
             // setPassword clears the resetToken
-            users.setPassword(userObject.id, req.body.password, function (error) {
+            users.setPassword(userObject, req.body.password, function (error) {
                 if (error && error.reason === BoxError.BAD_FIELD) return next(new HttpError(400, error.message));
                 if (error) return next(new HttpError(500, error));