If the http authentication is enabled, the password is only used when you want to change your email address.
Can you suggest an alternative solution?
I was thinking about putting condictions on the code to not display the password field on the edit profile page, and into the validator in the controller, since in the http authentication usecase password has no meaning.