API support for optional password when updating a user