Why does password not validate to presence => true?