finished PUT /user REST API function