Don't let authorization_adapter overwrite id when creating or updating an object

This is related to Issue #1203

If a permission like `can :manage, Player, :id => 2` was set (when you want to only allow a user to manage certain Players) it would overwrite the id of the object and could cause an update of the wrong object or creating an object with a duplicate primary key.