commit_id is not necessary (not used anymore?), sha is specified in request uri