Allow users to be created without a password, to support inviting users via OAuth