Add some security checks to /user endpoint.
User data that resides in local storage & rootscope should be update when the user itself is updated.