Use scopes for User admin attribute updates

[github-actions]

Use scopes to control who can update previously admin scoped attributes of a User model.

rest-api/src/placeos-rest-api/controllers/users.cr

Lines 158 to 169 in aa815ec

	def update
	# Allow additional attributes to be applied by admins
	# (the users themselves should not have access to these)
	# TODO:: Use scopes.
	body = self.body.gets_to_end
	if is_admin?
	user.assign_admin_attributes_from_json(body)
	end
	user.assign_attributes_from_json(body)
	save_and_respond user
	end