This issue is for tracking all the pending user/account-related functionality implementations. Current task list: - [ ] Hide user email field in the GET endpoint - Security/privacy concern. - [ ] Allow users to update their password (by using the reset token as saved in the DB) - [ ] Allow users to update their display name