persist  but ignore admin field.  Prep for using shared object create/save.

* admin field is accepted but ignored - fixed value of false is
  persisted for this iteration.
* make chef-user accept the standardized form of ``update_from_ejson``,
  which does not include an additional password tuple.  Caller is
  responsible for making sure object record is correct.