Edit user form does not handle password correctly

The form currently uses the _form.html.erb file to render - but that contains password and password_confirmation. The user is not saved with these attributes, but a password_digest.

The view needs to use this somehow.
