class Devise::RegistrationsController

def update_resource(resource, params)

You can overwrite this method in your own RegistrationsController.
By default we want to require a password checks on update. 
def update_resource(resource, params)
  resource.update_with_password(params)
end