Only validate presence of password when creating a new User or when updating its password.