add proper handling for blank passwords on user edits -- a blank password now leaves the salt and hash fields unmodified