Dont restrict listing/updating of users to sys_admins. Each user should be able to list/change her/his own informations. Added a new middleware checker "all" for this. This stricly not needed because all users are at least a waterway_user. This is for the case theat we may later (unlikely) add other roles and for explicitness of model constraints.