Altered deny() to allow updating of only certain fields