updated the UsersController to make :private editable