removed password requirement