You should let users sign up using only email and password