rest update should be PUT rather than POST