allow POSTing to create new records