guest users can update their passwords without first having one
Merge branch 'master' into guestuser