accept PUT for whitelisted suffixes