Security fix: no more matricola moving

We used to pass also 'matricola' every time we edit info. 
Now 'matricola' is the login name and can't be modified via API.
Is this `message.Matricola` something that the user can set?