* Only allow user type update if different from original * Clean up user type assignment on user update * Clean-up user type assignment on user creation