allow marking notes/thread as read (bug 897265)
add PATCH to allowed CORS methods in thread api
Allow API consumers to remove apps from a collection (bug #894589)