Create a mechanism for filtering put details, and now users can change their own passwords but not rename themselves, etc.