don't allow other users to update user's about