Admin Users

Note: updating an existing user preserves their current password hash (password changes are not exposed in the API yet).