Only require password when updating users if password is being changed