adds update and destroy to user resource

Note - users can edit their profiles, but can't change whether they are a business or private. Also, they can't edit their passwords, I will try to add that in later, but it's not crucial for MVP. Delete works and redirects the user to the login page, after flashing a warning.