slight refactor
unset empty password in profileUpdate