remove need for password when updating user attributes and a few small
graphical improvements