Rails no longer pre-fills password fields by default.  Since our passwords are
so poorly protected anyway, I'm going to continue to allow it to in the case
that the password_confirmation differs.