add PUT /users to update user