there is no need to set the password value, very change user info needs password, make sure this is legal