[FaceRest] Replace DataQueryOption with OperationPrivilege for DBClientUser::updateUser()

Since recent OperationPrivilege accepts userId for setting
privileges, we should use it directly.
Old OperationPrivilege didn't have userId.