refactoring, update password now in profile route instead of password_reset route