Dupe attributes in `update!`

Previously the `id` was removed from the hash in the caller.