update to set password as optional