Profile & password update - API