Fixed Security on UserListResource and UserResource. Bug solved when check username on PUT