Fixed bug

 -couldn't update profile info due to mass assignment security issue
 -added 'passord' to attr_accessible to user model
 -works fine now