Allowed API users to always be authorised to fetch or update their own details

Closes #110