Modified to support changing pass and allow empty profile fields
* Added old_password to api validation to check users old password
  when changing to a new password
* Allowing empty profile fields, this allows users to clear their
  profile fields after initially setting them.