Expose Password field in auth