Change update to update_attributes in API controllers