Logical error in _user_resource_update prevents updating password

In "resources/user_resource.inc" the function _user_resource_update contains the line:

if ($key != 'pass' || $key != 'roles') {

Of course this will ALWAYS evaluate to TRUE, the value of $key will always NOT EQUAL one of these values. From the logic and comments of the function I believe it was meant to be:

if ($key != 'pass' && $key != 'roles') {

This change makes the function work as intended by handling the roles and pass values separately in the linese below this one.

The current version doesn't allow updating the password on the User PUT request.

I will include a patch in the comment below.