removed password fields from edit_after_auth - since apps now support oauth signin this step is not needed