Modifying users in Admin module breaks user model

HTTP PUT requests were passing params in URL instead of body.
this is so queries are serialized as JSON, correct?