Add kwargs to _user_is_active_or_staff

[can_update](https://github.com/cam-stitt/django-ajax/blob/master/ajax/endpoints.py#L87) was causing issues as there were no kwargs being passed into _user_is_active_or_staff.