fixed updating password action when password is blank
fixed typo on the user passwords controller