POST (create) is for creating an unidentified entity; this one is clearly identified via /:id, so PUT is appropriate (update).