PUT was POST ... and should have been PUT