[FaceRest] Allow empty user password for updating an existing user record