Add option for users to update or delete their account and re-generate their API token

[NicoBiernat]

Users should be able to update their username, password and e-mail.
And they should be able to force the re-generation of their API token (DELETE /users//api-token) in case they accidentally leak it.

[NicoBiernat]

#118 implements API-token regeneration/cycling