fix(user): PUT user retricted path errors are 401, not 500