Change the constraint declaration. It should be:
<pre>CONSTRAINT security_password_pk PRIMARY KEY (user_name,user_password)</pre>
(No underscore between PRIMARY and KEY)
And, as Mrdenny suggests, don’t inlcude the password in the PK (if you do it won’t cause errors when creating the table, but it would nullify the purpose of the pk).