Mention that User::setInternalPassword() accepts null as password string