users can edit account details, closes #90