reset password to undefined instead of empty string