It looks also like GetUser doesn't return the password.
But GetRequestedUserSettings will do if the password field is specified as the incoming argument.
I wonder if retrieving the password from GetUsers() or GetUser() was removed as a security precaution?