Admin cannot change another user's username

There is a check done in _user_resource_update() to ensure that a user is only able to edit their username if they have the "change own username" permission. This is similar to the check done in user_edit_form(), but unlike the form, the resource doesn't allow a user with "administer users" to update the value.