Removed filter_for_user() call.

Remove magic filtering and let the developer decide filtering that
applies to their application by implementing the logic in a subclass.
Updated logic to set request.PUT.

Make sure the PUT attribute is set when an action is specified.
Merge branch 'set_request_put_with_action'
Fixed tests