allow updating user account with or without setting password
throw error if unable to delete spimes
allow account editing (change password, set nickname)