Reworked password update and profile update routes

Addresses https://github.com/my-koop/module.user/issues/29 and https://github.com/my-koop/module.user/issues/33
I imagine I would need to put this logic in the `attachParamUserId` controller?