Reproduce password validation defaults

oauth-based users won't need passwords