Add failing integration test test for #954
Don't require password when it's not being changed. Fixes #954

We're overriding a devise method here so we also need to check if the
password is being changed.