This problem I found (years ago) was caused because I once added a customer with a credit card. That triggered the password. When I removed the credit card, the password issue remained. I found that when the credit card number was removed, the expiration date remained in the database, thus continuing to trigger the password.

I would be interested in knowing if my request years ago to have your engineers COMPLETELY remove credit card informatiuon was ever enacted?