Add attr_accessibles for passwords.