Must set password for user configured in local-auth