wip for a user, separated the password updating from profile editing. update_attributes always wants a password
Removed password validation from User model so that User edit form now properly updates attributes
Bug fixed -- user can now log in with username, not email
Now shows user profile error messages in the form where it happened