Authenticated user can update its own fields only