Fix regression in has_secure_password.

If the confirmation was blank, but the password wasn't, it would still save.