Add some words about Authentication
specify error codes for PATCH operations
temporarily disable PATCH for workpackages

- should be currently unused
- contains critical security flaws that should not make it into OP 4.0