serializable_hash's default value for options is nil

make sure we pass an empty hash to except_read_only
make sure we don't overwrite wanted changes in associations

don't override associations in the attribute hash when including child
updates