Save on PUT; fixes user/admin permissions

This fixes the permissions so that only the superuser can create users. A user can now change his password via a PUT request.

Fixes #5