user can edit own information, user and admin can edit information without password confirmation
Merge pull request #2 from bbbox/edit-user-information

edit user information