fixes #6991 - API v2 - support unwrapped POST/PUT parameters even though it's not documented

The goal of this PR is the preempt any possible bugs from API consumers that try to POST/PUT unwrapped params.
We could use `Model.reflections` to get the association names automatically.