Remove unnecessary security mapping for empty action UPDATE
It should not be possible to send a request without an action
with the
JSON syntax. More surprisingly, there are no tests to capture this
functionality, so it may have been a mistake.
Edited by Jamie Tanna