allowed updating user with blank password
finished models