Note: The user json returned from the first PUT with `{ email: '', email_confirmation: ''}` is actually stale due to what seems like a Garner caching bug. Oddly a second PUT with empty params seems to bust this cache. (The `req.login req.user.set(r.body)` would be necessary regardless)