Form does not allow blank password
The update user page says, "To change user profile without changing the password, leave it blank', but in the HTML form the passowrd and confirmation fields are 'required', preventing the user from 'leaving them blank'.