Revert "Temporarily disable user updates"

This reverts commit 6ffd0a47.

app/policies/user_policy.rb

@@ -14,7 +14,7 @@ class UserPolicy < ApplicationPolicy
   end
 
   def update?
-    false
+    user? && user.admin?
   end
 
   def destroy?

app/views/avo/partials/_sidebar_extra.html.erb

@@ -2,10 +2,8 @@
 </div>
 
 <div class="space-y-1 mb-4">
-  <% if false # temporarily hide password update so test users dont lock out one another %>
   <%= render Avo::Sidebar::HeadingComponent.new label: "Your Account" %>
   <div class="w-full space-y-1">
     <%= render Avo::Sidebar::LinkComponent.new label: "Change Password", path: avo.settings_password_path %>
   </div>
-  <% end %>
 </div>