Update user endpoint actually receives an account UUID as parameters, so the guard should check if the user has a privilege to do that or check if a user is trying to edit his own account.
