Commented filtering password, it breaks /auth.