id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
27045	Document that AUTH_PASSWORD_VALIDATORS doesn't apply to create_user() and create_superuser()	Chris Griffin	Tim Graham	According to this [https://groups.google.com/forum/#!searchin/django-users/AUTH_PASSWORD_VALIDATORS$20create_user%7Csort:relevance/django-users/3nL4cImH1Ls/JPVdlUX9CAAJ thread], the `create_user()` method does not enforce the password validators which I ran into while trying to unittest my validation settings. This seems quite dangerous especially since most validation in django is normally on the model level and many developers like myself may assume these methods would enforce these settings.	Cleanup/optimization	assigned	Documentation	1.9	Normal		AUTH_PASSWORD_VALIDATORS		Accepted	1	0	0	0	0	0