Remove password and password_confirmation from whitelisted params in ProfilesController to prevent password from being changed without previous password being provided