Implement PUT and DELETE /api/permissions/{vhost}/{user}

Fixes #36.
Fixes #37.
go fmt