When updating a patron via the api we should write protect the updated_on field and ensure it is updated