only current user can edit and update their user settings