Remove node serialzer 'set_state' restrictions and allow API response 400 on disallowed changes (#378)