Use X-REQUEST-METHOD-OVERRIDE for all except GET

Previously PATCH requests failed because the HTTP library didn't
support them. Now they work!
Update API to use authorization header

And update corresponding user object and response parsing.
Log API response parse errors
Fix user image json parsing