POST /cluster/update
refactor the validation error handling
add a smoke test for updating a cluster
only allow those with correct permissions to update a cluster
remove cluster#canEdit in favour of cluster#userIdCanEdit