WIP: User update functionality

investigating case of leaving password field empty on profile update page