Don't crash if the user's password property is currently undefined, just refuse logins