Allowing 'password' to be mass-assignable.

Signed-off-by: Ben Corlett <bencorlett@me.com>