Switch out PATCH with PUT, since *Request.ParseForm doesn't parse forms
for PATCH requests.

Include typical form content types don't include error message though
because for POST/PUT requests(where form content types would be used),
we use JSON for responses.

Complete updating user data, only allow updates to password for now, if
we allow the name to be changed then we are required to update all
tokens as well which isn't really feasible.