search in all experiments, remove validating on password (who cares, it
will be hashed anyway), admin can edit passwords, fix bug on delete user