edit user only if current user