Restricted account owner not to be able to alter its staff status, user permissions and groups. Refactored UserSerializer to use just one for password as write_only_field and closed #33