fix user can change superuser bug