In "Create new Account" form, the field "password" is rendered as required but it isn't. The form can be submitted without a password and no error will be returned.

Either: a) make it no a required field or b) implement server validation so that it's actually required.