removed custom validations from user password to allow has_secure_password to do its own validations