Allow for editing document's privacy

- Add PUT to allowed verbs in document resource
- Merge existing raw data with updated data to avoid overwriting fields
 in a map.
- Use prepared query since I couldn't find how to update a list at a
 given index using hayt