API update user + rspec API longin, update user