disallow super user to delete or update himself except for password
field.