default password on Facebook registration
set back create_update to protected