Fixed Staff validation rules to accept password fields