bug fixed: user could edit user of same role, fixed to: admin and own rights