MDL-27804 allow changing of only auth in csv user uploads