CCAuth - always fail validation if user has no pw.