allow user and admin to edit profiles