[UserController] set http method delete
[AppService] move method
[UserService] if password is null ignore update password
[UserRepository] move method to parent