starting #8, read-only display of user data
for #8, allow updating user data
be a bit more specific in the update endpoint regex