A user must have a password