add user management permission
modify some wording of permission descriptions to match others
unify variable naming of http status codes in internal code
real permissions for updateUser