updated user and product resource to adapt to new restricted role
fixed the authentication issue
fixed the password did not retain issue