Simplify authorization and allow palette update
Add palette update route
Implement Palettes#update