This PR changes the following: * Create an API config section for API configurables. * Add a setting `UserPatchLimit` that controls how many users can be changed in a PATCH request. * Use this setting in the API to limit the amount of users that can be changed.