handles PUTs via POST, throws 405s