Update auth.php

added comment , Admins should be able to edit anyone