Skip password attribute if blank when updating user