allow user to change their username and password
but unable to load id from database yet