admin should be able to update user's information without updating user's password