edit user: password would not be unset if admin does not enter a new password for the user