Creating a stored Proc that creates new user and password
One mistake for sure:  Each of the 3 statements needs a ; at the end.

Possibly the syntax calls for literals, not variables for user_name and password.  So use CONCAT(), prepare, execute, and deallocate prepare to build and execute the CREATE and GRANT statements.