Ensure password verification is enabled

[rajanmaghera]

For development, we turned off password verification (think ex. password greater than 6 chars). We will need to turn this back on in production.

For reference, we turned it off in #45