correct route definition (wasn't working with POST)