Fix exceptions, check bad JSON, check permissions on user update