diff --git a/app/controllers/admin/users_controller.rb b/app/controllers/admin/users_controller.rb
index 36ab4f271..fa0d25803 100644
--- a/app/controllers/admin/users_controller.rb
+++ b/app/controllers/admin/users_controller.rb
@@ -13,9 +13,7 @@ module Admin
     private
 
     def user_params
-      allowed = allowed_params
-      allowed << %i[password password_confirmation] if params[:user][:password].present?
-      verify_usernames params.require(:user).permit(allowed)
+      verify_usernames params.require(:user).permit(allowed_params)
     end
 
     # make sure usernames are not empty, to be able to use the database unique index