removed has_password