link_to_remote

Shandy Nantz wrote:

     if @user.save

What's the line above this? How do you know @user is the same as the @user in the form? (Recall that Rails effectively stopped and restarted between sending a view and collecting its responding actions.)

if your @user is not the same as the one indicated by params[:id], then it has no password...