Change edit user form to form_for, include password_confirmation in update params.