removes encrypted_password to use cas for auth