admin can change password

Did some refactoring so ProfileController and UserController share
some code.  Although everything works, definitely need to refactor
this.  Way to complicated.