Add update specs!

Add specs and testing for restful API controllers
I'm making the assumption here that if you're calling show, you're loading a page and thus searching by a key. I don't think there's a use case for us loading a single resource by it's id.