fix update credential redirect path
fix for any user able to elevate to be admin