dont let a user update their own points