complete updateUser method