users: add extra checks on editing the default user There is no need to be able to edit e-mails or permissions of the default user, so add the same checks as present in many other methods in the users controller.