enforcing the difference between PUT and POST