Updates a IMSUser based on the provided input Does not check the authorization status This MUST NOT be exposed via the public API
the updated IMSUser
defines which IMSUser to update and how
