Allow "change user" requests

This PR changes the "add new user" form to the "add or change user" form.

The driver for this change is to stop "change user permissions" requests getting dumped into the general path.