small changes to user controller update action

not quite done, but close