Whenever a user is updated from web UI, audited_changes has a false entry of Password changed from [redacted] to [redacted] even though the password was not updated/changed.

This does not happen if a user is updated via API

Steps to reproduce.

1. Navigate to Administrator -> User
2. Select any user
3. Update the description and hit submit
4. Go to Monitor -> Audits you'll see an audit entry saying: Password changed from [redacted] to [redacted]