api/user/    edit and deactive