routes: limit non-admin to own profile

Signed-off-by: Sergei Ianovich <s@asutp.io>
limit user fields visibility

Signed-off-by: Sergei Ianovich <s@asutp.io>
tests: routes: update user authentication

Signed-off-by: Sergei Ianovich <s@asutp.io>
routes: limit updates non-admin to own profile

Signed-off-by: Sergei Ianovich <s@asutp.io>
routes: update self user name

Signed-off-by: Sergei Ianovich <s@asutp.io>
routes: deny update self admin status

Signed-off-by: Sergei Ianovich <s@asutp.io>