Allows password to be ignored when updating user profile.
Fixes update action to use strong parameters.