Update UserLocationAgent

This addresses #490.
@cantino The update_location action invokes multiple agents that have a specified secret, so it would require more than just an alternative route.

I thought we'd better avoid putting a special treatment for the action in `handle_request`, so I just chose to just transplant UserLocationUpdatesController to WebRequestsController as an action.

What do you think?