Added allow rule for users so they can update their own account.