password shouldnt be needed when unchanged for info update