Password must be nullable to allow for social service authentication