ADD: user can edit his username and email, also change password