[bugfix] Do not change user password if none was provided. Assumes that resetting a password to empty is never allowed once is has been set.