Fix the PUT /case endpoint to be a PATCH instead.

Since the endpoint only allows updating certain fields instead of the entire object + we already specify the id in the url it conforms to the standards of a `PATCH` request instead of a `PUT` request. Make sure the validation is correct & write a test case to make sure only the right fields are getting updated.