Security fix: no more matricola moving

We used to pass also 'matricola' every time we edit info. 
Now it's 'matricola' is the login name and can't be modified via API.