add endpoints to change the request status and comment field without authentification

[johnsmithm]

when the volunteer see the list of request, the user can mark the request as done or canceled and add comment.

method: PUT
/api/requests/update

the same format as /api/request PUT method, just for the fields status and comment.

{
cluster_id:"",
_id:'request_id',
status:'canceled',
comment:"the beneficiary was not home"
}

check also that the cluster_id is the same as in the DB.