remove validation from password until I get prehooks figured out