remove 'patch' from 'allowed_methods' on 'UserResource'