commented security constraints out, Kunde: password can be null
password kunde: nullable = true!