only accept put for updates