add first_name in permit parameters
remove old password fields
update link_to for working button
hide ugly field file uploader
bind avatar to upload form