fix: prevent accidental overwrite of defaults
feat(prospects): respond w/ full object after POST