removed User password presence: true validation