can specify user id in security el
build with support for java 8 parameters
id of update user object must match id in url
fix vagrant provisioner so its idempotent
tried authorization changes, modified comments with notes