added parent_obj to bundle, added authorization to all detail methods, disabled create on patch_list method
minor bug fix. is_authorized was being passed parent_object instead of parent_obj