I added hidden field generation to ModelTask, and allowed password to be mass assigned.