unsetFields through events is not a solution.
Password authentication does not work as such.