Modified user update method so that current password is only required if password is being changed