fix(setup): add local to provider on set password

This is proper book keeping. The application doesn't actually check if
you have the local provider when trying to log in via password.

#56
fix(user): update no longer resets password

The user's password was being randomized every time the pre-save hook
ran on the User model. So whenever a user would update their profile,
their password would be randomized.

#56