fix change user functionality

- do not save empty string as password
- do not double encode password, - set passwordis is called from symfony "magic"