Authenticator: remove initial password checks