fix(app/user): use proper UserAdmin auth form

* use `django.contrib.auth.admin.UserAdmin` as `admin.ModelAdmin` do not provide forms to
  properly handle `passwords`

[1]: https://docs.djangoproject.com/en/dev/topics/auth/customizing/#custom-users-and-the-built-in-auth-forms