fix(server/user-routes): do not overwrite local field with partial data in update as admin
fixes #281 (closed)
password gets removed because the local object from the request does not contain any password and is not merged by default.
Edited by Sebastian K