django edit user form

def updateUser(request):

    userId = request.POST['userId']
    username = request.POST['username']
    firstname = request.POST['firstname']
    lastname = request.POST['lastname']
    email = request.POST['email']
    password1 = request.POST['password1']

    user = User.objects.get(id = userId)
    user.username = username
    user.first_name = firstname
    user.last_name = lastname
    user.email = email

    if password1:
        user.password = make_password(password1)

    user.save()

    return HttpResponse("<h1>Successfully updated!</h1>")