Added check so cannot update another user to above his level