Added config to always validate passwords