Add missing "entities" parameter in create_suppressions POST