fix various typos, most notably password validation
profile page