Spec for bypass: true and removed unnecessary check for changed password in ProfilesController.