Ensure that only patch creators can update their patches.
Add test verifying that merged patches cannot be updated.
Implemented "OAuth dance" to enable registering ORCID credentials for authentication.