diff --git a/Clckwrks/Authenticate/API.hs b/Clckwrks/Authenticate/API.hs
--- a/Clckwrks/Authenticate/API.hs
+++ b/Clckwrks/Authenticate/API.hs
@@ -11,12 +11,12 @@
 import Control.Monad.State          (get)
 import Control.Monad.Trans          (liftIO)
 import Clckwrks.Authenticate.Plugin (AcidStateAuthenticate(..), authenticatePlugin)
-import Data.Acid as Acid            (AcidState, query)
+import Data.Acid as Acid            (AcidState, query, update)
 import Data.Maybe                   (maybe)
 import Data.Monoid                  (mempty)
 import Data.Text                    (Text)
 import Data.UserId                  (UserId)
-import Happstack.Authenticate.Core  (GetUserByUserId(..), Email(..), User(..), Username(..))
+import Happstack.Authenticate.Core  (GetUserByUserId(..), Email(..), UpdateUser(..), User(..), Username(..))
 import Web.Plugins.Core             (Plugin(..), When(Always), addCleanup, addHandler, addPluginState, getConfig, getPluginRouteFn, getPluginState, getPluginsSt, initPlugin)
 
 getUser :: UserId -> Clck url (Maybe User)
@@ -24,6 +24,16 @@
   do p <- plugins <$> get
      ~(Just (AcidStateAuthenticate authenticateState)) <- getPluginState p (pluginName authenticatePlugin)
      liftIO $ Acid.query authenticateState (GetUserByUserId uid)
+
+-- | Update an existing 'User'. Must already have a valid 'UserId'.
+--
+-- no security checks are performed to ensure that the caller is
+-- authorized to change data for the 'User'.
+insecureUpdateUser :: User -> Clck url ()
+insecureUpdateUser user =
+  do p <- plugins <$> get
+     ~(Just (AcidStateAuthenticate authenticateState)) <- getPluginState p (pluginName authenticatePlugin)
+     liftIO $ Acid.update authenticateState (UpdateUser user)
 
 getUsername :: UserId -> Clck url (Maybe Username)
 getUsername uid =
diff --git a/clckwrks.cabal b/clckwrks.cabal
--- a/clckwrks.cabal
+++ b/clckwrks.cabal
@@ -1,5 +1,5 @@
 Name:                clckwrks
-Version:             0.26.0
+Version:             0.26.1
 Synopsis:            A secure, reliable content management system (CMS) and blogging platform
 Description:         clckwrks (pronounced, clockworks) aims to compete
                      directly with popular PHP-based blogging and CMS