update IAM users for rites and vpb

RITES production hasn't been updated, so the old
rites-production-s3-user can't be deleted yet.