users can update users; flash message on update