[#818] Add userId to credentials for API users

* Fixed requestUri for FORM_UPDATE permission