Any client-side calls to the update route need to be checked to make sure they are passing the user's email as the parameter.