ignores dev notes
removes hardcoded value from access_token spec
updates readme with api changes
ensures non-admins can only edit current user - https://github.com/mitchell852/logh/issues/34