User update rspec tests and implementation

The update user endpoint works for now (a couple of controller tests should be enough). 
Since a multi-role implementation is not going to be implemented, the "auth" simply restrict all the actions accesses to the user corresponding to the passed-in access token.
Ready to implement backbone form.