a user should only be able to change his own password/username/email
Merge pull request #275 from Kunstmaan/edit_user_permissions

a user should only be able to change his own password/username/email