Update changelog.
Do not show password in email of user#update observer.