Don't force password change when password is not provided.

This might happen when the user is being authenticated externally e.g LDAP.