Update controller/auth.php to allow admin edit

Line 516 has a csrf check that prevents admins from editing other users.
The view submits logged in user ID to post data, as is convention in other places as well.

Line 497 had previosly been edited to allow admins to edit other users, but not the csrf check