merchant can edit products

@cgruppioni @aslawter 
validation should be here... 

if product.images .. etc. and images isn't an instance variable because you're in a partial