fixed user profiles showing the correct user now; removed password requirement on update page