Remove immutable ObjectId from update attributes on PUT requests to prevent failure

This allows an object retrieved with a GET request to be updated with a PUT request.  Previously the request would fail because it contained an immutable attribute _id.  Now the attribute is removed if it matches the id used in the route.