update user by administrator now works
read only on username for user update