fixed user edit by sanitizing account update parameters