routes/merchants.js: perform sanity check for PATCH requests.