Put constraints on POST to make sure it has no id and PUT to make sure the object already exists.