add PATCH to allowed api methods