fixes #30 - add User API and PATCH with CC token

What if we did this to save the query:
```python
def get_object(self, qs):
     return self.request.user
```