rm redundant pw validation, handled by bcrypt