added current_password to strong params for update