Fix update user

- When updating users (put /api/user/:name), use strip(user) when updating session user data when users are updating themselves.
- wrote test to actually verify that session information is updated on PUT /api/user/:name and DEL /api/user/:name (<- admin users deleting themselves module logs them out).
- commented out tap tests

@twilson63 just letting you know brent is also writing updates and will send a PR in the near future, just letting you know this so that you don't have push to NPM until you get his stuff merged in. Let me know if you have any questions.