I originally had `/raw_password/session/create` implemented here as `/auth/password` and forgot to remove it