sever password set/change from general user update

[michael-conway]

Questioning whether to just do a complete facelift, the update of user type and other factors should be separate from password change. Otherwise, a confirmation password is required on any update, making this generally useless.