fixed attribute level of password

set_unless sets attribute even when a value already exists at another precendence level so it doesn't recommend.
http://tickets.opscode.com/browse/CHEF-2945