moved hasPassword to edit route

its only used there no need to display it everywhere user info is
retrieved