user update now *silently* ignores disallowed fields, until we find a satisfactory solution in backbone