Remove $purpose parameter from password validity check