1.1.3 : only set lopass/newpass if nil
1.1.3: newpass set to NULL when set_password is set