Don't check password in membership API