only update and destroy in entities controller under api v1"