non admin user can only change own password

- another fields are disabled