add PUT/DELETE resources for user permissions

needs "permissions:edit" permission