[fix] Don't throw if password field is missing from update.