The user can register, edit your profile. To edit a profile, use the same form as for registration. But when editing a profile, the user also has to enter the password and its confirmation. And if the profile is not edited by himself, but by the administrator, then he will also have to enter a password, which he, of course, does not know. So, what to do to avoid this?
PS model controller and display generated by scaffolding.