ensures updates to user info dont require password if using oauth