Okay, so I had to disable the auth provider to change the password field… I’m confused as to how that makes sense. Are we discouraged from using this auth method?

you are encouraged to upgrade the legacy integrations to a resolver function, here are examples: https://github.com/graphcool/templates