Fix UpdateUserAuth to allow updating without password