update users
authorization, sign in user before edit/update