Several improvements to ease user access

Allow users to update profile with no password.
Change password is a separate form.
New user email is more explicit about account creation.
Forgot password link in email signs out user
fix specs