edituser permission level

added permission level functionality to edituser.
Admins can now change permission level of any user, users cannot change
their own permission levels.
Changed edituser sql to REPLACE from INSERT or UPDATE