allow updating user information