Allow api to update users
Deleting a user now works - no security