Set the raw password and its confirmation values.

Instead of assigning the encrypted version, use the raw value so
we can apply validations on the actual password.