Story: admins should be able to edit password on any user and user can edit his own password