API: PUT users/settings and use the API in the controller