user: when updating a user, never set the password to None - the field is not nullable We also don't allow setting empty password. Setting the database value to empty string is secure but will never match any password.

pytest>=2.7.0,<4.0
pytest-runner
pytest-sugar>=0.7.0
pytest-catchlog
WebTest<2 # this is also a Pylons dependency and pinned in setup.py to avoid version conflicts for WebOb
mock
sphinx