Add PUT and PATCH on models/{modelname}/acls endpoint.

`token not in ("Authenticated", "Everyone")`