Task 7 - update forbidden field

app/Http/Controllers/UserController.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\UpdateUserRequest;
+use App\Models\User;
+
+class UserController extends Controller
+{
+    public function update(User $user, UpdateUserRequest $request)
+    {
+        // TASK: change this line to not allow is_admin field to be updated
+        // Update only the fields that are validated in UpdateUserRequest
+        $user->update($request->all());
+
+        return 'Success';
+    }
+}