add link to admin layout
update user without current password