Add security to users/apps by having it act on current user
Add JS to users#apps response that updates the apps list