updated devise to not require current password to updateuser profile