updates form in user/show and added password