fixes Issue #611 by letting an admin destroy and update a user