Add specs for PATCH update
Add spec for trying to PATCH other user
Ensure only admins can delete users
Merge branch 'refactoring/add-spec-for-users-controller'