Allow admins to set a user's password

Modified the logic behind the user update, to allow the admins change the user's password without providing the current password.

refs #1410