more update tests, and a change to Model.update where only the passed-in values are validated