allowed encrypted_password to be null, as ldap authentication is on