allow PUT requests