Users can update without setting a password