Fixed API put so that private works are preserved.
Added check to make sure that current API user is the source of works
that they are updating.
Updated affiliations API PUT so that existing private affiliations are
retained.
Update affiliations API put so that API user can't update stuff they are
not the source of.
Make sure affiliations are retained during API PUT if they are from a
different source.
Corrected logic for retaining works during API PUT, and made consistent
with affiliations.
Changed stuff for preserving private data and stuff from other sources
during work and affiliations API PUTs, so that is one generic method.
This will make it easier to do the same for fundings.
Formatted.
Preserve private fundings and check source during API PUTs.
Make sure source is either blank or correct when adding new activities
during an API PUT.
Merge pull request #903 from ORCID/fixApiPutWhenPrivateStuffExists

Fix api put when private stuff exists