i think semantically this should be a POST