[fix] make Users#update match flatiron-cli-users' expectations

This was breaking changepassword.
AFAICS nothing else uses this method.