Ignore password validation on user update if not set