updated users controller to not sign in the user when updated, added method to user model to ignore current_password