login/edit: target user data distinct from login