Template workflow allow an empty SSHA password

There is a problem with the template workflow and/or the handling of password methods, because you can end up with an empty SSHA password doing the following:

1. Create a template and fill nothing
2. Use this template to create a user
3. Fill all asked fields, then just validate
4. The user has no password but has SSHA method