Still need to change controllers quite a lot.
This will probably not be done through management, but 1) there should still be a way to update a user through the management interface, and 2) it'll be easy to copy this code over to the public interface later.