Corrected user.update POST handler