add update and delete methods for admin (UserController)