Limit how much the API could update

[Gisonrg]

Currently too many thing could be updated under one single API endpoint. Try to refine it.
For example,
one api for change name, one api for update skilss, etc.

Also, limit what fields could be updated. For example,
facebookId, _id, timestamps, should never be updated by user input