fix for #7, typo with `req.body['id']`