user_id is removed from URL at userprofile, users cannot edit the others data