...
POST Create User
Specific User by User Details (see mockup and features)
Only Admins can create Organizations
api/users
Include User JSON Parameters Object
PUT Update User
User can update own user only. Admin can update any user.
To change password, include "OldPassword" and "NewPassword" in JSON object. These fields are optional. Leave off "Password" when updating the user.
api/users/{UserEmail}/
Include User JSON Parameters Object
DELETE Delete User
User can delete own user only. Admin can delete any user.
api/users/{UserEmail}/
GET User (by Email)
Anyone logged in can pull up user profile
Specific user can pull up sensitive user information
api/users/{UserEmail}/
...