in shark, password fields aren't automatically preserved by id