UserController now handles user update without changing the password