several enhancements (#1808)

* show all fields in timesheet api docs
* fix action dropdown links #1806
* apply same validation rules for passwords and for api-tokens #1753
* added "duplicate team" action #1136

src/Controller/UserController.php

@@ -70,6 +70,7 @@ final class UserController extends AbstractController
     public function indexAction($page, Request $request): Response
     {
         $query = new UserQuery();
+        $query->setCurrentUser($this->getUser());
         $query->setPage($page);
 
         $form = $this->getToolbarForm($query);