'simpleSecurityObject' requires attribute 'userPassword'