Adding possibility for admin to change the user institution refs #1058

Still need to investigate if there should be something more in the controller to prevent mass assignment