Update user.php

Typo corrected:  $this->getHiddenField() was $this->_getHiddenField()