note: POST is the *only non-idempotent REST operation* !