when going through new user setup, don't change the password if they don't