made password optional, null values are allowed
Fixed bug: Crash when no roles where selected in User.jsp