remove password requirement on profile update
look for fb_token in GETS and POSTS