Password setter should always update @password

Even if the `unencrypted_password` parameter is blank the update should be reflected in the instance variable `@password`

The expected behavior is:

    user.password = "example"
    user.password = ""
    user.password # => ""