return resource object for PATCH requests only when response body is returned
all fields are PATCHABLE when PATCHABLE_FIELDS is not defined
add tests for settings resource
fix permissions resources