update GET /user