make update_by_user an instance method