No validations (uniqueness of email, etc.) Line 5 makes the password accessible to mass assignment (read the links Abi sent this morning)