xform share api endpoint

why is owner necessary? isn't `formid` unique?