Updating profile shouldn't require a password.