Require password from users just once

Bonds early adopters define them in the confirmation process and others
in the signup.