finished feature: admin edit of user account (but not password)