added PUT/PATCH /users/:id endpoint