Users edit password

slightly changes user validation and authorization, as well as user edit