Changed so that external ORCID of added external identifier is only
overwritten (with the ORCID of the current API user) if it is not
supplied in the request.