Make user API full writable

- Update auth_token serializer
- Define get_identity for roles serializers for allow updating it