drop login password, user openid is enough.