update spec to allow updating profile without pw