don't require password on signup
conditional root_paths