Added feedback to save() calls.
Prevented controllers to set type not to 'User'.
Do not allow editing yourself.
Only showing users to controllers.
Fixed test.
Do not allow type change for self.