Security fix: no more matricola moving

We used to pass also 'matricola' every time we edit info. 
Now 'matricola' is the login name and can't be modified via API.
Yes, and we want it. This is for signup or reset.