only supply nonce when a password digest is used to avoid schema validat...

...ion errors