users now can edit acc without password_confirm (fixed for password change)