The routes for user is not secure and needs to be fixed. Do this. While at it cleanup the update method in user.
Activity
Proposed solution for #152 (#166)
Proposed solution for #152 (#166)
Proposed solution for #152 (#166)
Proposed solution for #152 (#166)
Proposed solution for #152 (#166)