convert update-user to work with pulp v2 for #100

I don't know why password is now being stuffed in an array, though