User is now editable. Should make acl next and User should only be able to update itself.