Ignore base_path in request data

We use the base_path as defined in the routing params so we can ignore
completely base_path as it appears in the request body. We want to avoid
mass-assigning base_path as, although the alias of _id to base_path
prevents it being saved in the database, it doesn't prevent the virtual
base_path attribute from being set, which screws up the registerable
route calculations