allowing specification of ID in POST - not tested