Update user.php

Typo corrected:  $this->getHiddenField() was $this->_getHiddenField(
Merge pull request #983 from PtrNrs/master

Update user.php