In the UserRESTHandler + RESTHandler constructors: Raise a ValueError in case of using permissions that don't make sense. For example: - POST with PERMISSION_USER_OWNER - Any others?