project update enforces POST requests