Updated to include PATCH /users/:id

Also thrown when a user tries to download himself