Passwords are filtered in the user model, not the controller