Change resource actions to behave appropriately

'update' does not wrap data body in element
'delete' does not wrap data body in element
'post' does wrap data body in element
All destructive actions include a body.
Idempotent actions do not include a body, ever.
User is always included in destructive actions.