admin can edit user details. closes #9