add validation to require password when creating user.