don't reset user passwords on bulk upload
any number of *s counts as a null password
Treat empty passwords the same as ****
Merge pull request #1250 from dimagi/bulk_user_upload_fix

don't reset user passwords on bulk upload