remove double-checking password in POST