User model template: add current_password to attr_accessible