use save!(validate: false) instead of allowing nil passwords