why not just use `current_user.update` ?