redefines the behavior to password mandatory if the user is defined