Push edit form validation up into User service (instead of Controller)
If the password element is shown on the edit page, empty it's value
Ditch populateFromUser in favor of bind + hydrator