new user: dont include email/password if they were not specified