ID shouldn't be a param on update user endpoint

it's already a param in the URL, or am I missing something?

cc @rachelbaker