old password check on profile update
tests