User info can now be updated via the API.
Disallow changing of users password via the API.