refs #4650 - Discovered the ACL update doesn't work with save() since there is no sco-id field to key off of.  Switched to regular request()