fixed devise update issue: users can edit their profile, and username