updateUser - not necessarily all columns must be given