fixed: accept and reject actions now use put instead of post since they're idempotent