update user api to accept updates from admin users