ApplicationUserManager now has same password security set as the model's requirements