added user editing. todo: use cloud functions to modify them because permissions