user can edit own information, user and admin can edit information without password confirmation