[Sec] Validation should be followed to user detail modification

[5tarlight]

There is no backend level validation for user detail modification

• [ ] Check username to be changed is not taken
• [ ] Check password to be changed is fit to password policy