controller PUT route