fixed bug that let users change other users statuses