# Problem Description
Hi, I'm writing this post because I think the new functionalities change-password and reset-password doesn't have the expected security considerations.
When a user model is…
Modifying the User model in the following way does not trigger a validation error when attempting to create a user with an invalid password:
``` javascript
var User = app.models.User;
User.validatesL…