Fixed user updates to only return id, email