Users update their profile without errors

Seperate out attributes that only sysadmins should be able to change.