data/user: split bcrypt hashing into method
api/users: add PUT/PATCH users functionality, add note about HTTP methods to API documentation