sync gateway: user xattr configuration has wrong HTTP verb

As discovered by Alfred Nketia, in example 1 on https://docs.couchbase.com/sync-gateway/current/access-control-how-use-xattrs-for-access-grants.html this needs to be POST instead of PUT.

POST indicates a partial update to the config, but PUT is a full replacement of the config.