- @PreAuthorize checks - updateUser reloads record from the database before updating #fullName and #email