Ignore current password on update_without_password

For symmetry we should be ignoring the current_password field as well. This
makes it easier to work in forms where you ask for a password and conditionally
use `update_with_password` or `update_without_password` wether the password is
present or not.