FIX: only validate membership data if membership data is required, or password is not empty