plataformatec/devise — pull request #1484 by jroes (2011-12-03 19:27:26+00:00)
Title: Allow users to update non-password account attributes without their current password

A user should be able to update non-password account attributes (such as username or any other developer-added attributes to their Devise user model) without using their current password.

This is a standard practice on plenty of websites, and I believe this is a common enough use case that Devise should support it out-of-the-box.