Adds debug messages to user/<id>/about
adds PATCH to 'Access-Control-Allow-Methods' header.
Get rid of the CORS support thing.
add debug code before request.
make /patchtest endpoint.
Replace PATCH with fakes using POST and Access-Control-Allow-Methods header.

This gets around the fact that some firewalls seem to restrict PATCH.