Unable to Delete Project Owner or Reassign Project

I have the Community Edition running in a kubernetes cluster shared by multiple users and have been running into issues trying to use the API to manage a few things.

Attempting to use the API to delete a user returns an HTTP 500 internal server error if they are the creator/owner of a project, returning "maximum recursion depth exceeded while calling a Python object". If the project is deleted, then the user can be deleted successfully.

I tried to use the Update Project API to update the created_by to a different user so that the original can be deleted also fails, giving me a response of "The `.update()` method does not support writable nested fields by default.\nWrite an explicit `.update()` method for serializer `projects.serializers.ProjectSerializer`, or set `read_only=True` on nested serializer fields."

Not sure whether this is just simply unsupported feature or a bug, but I'd expect that I should be able to reassign projects or remove users that aren't needed anymore.

Also, I'm unable to find any method other than shelling in and using the CLI to reset user passwords at the moment. Are there any plans to add such functionality to the API or to the UI?