Removed user from EditVendorSerializer

I think there is a bug in our code that can particularly map vendors to
the wrong user objects on edit. I sure hope this hasn’t happened in
production…