Refactor: person must be created with an associated password.