changed user edit to be more secure