I can see how this would work:
/user/456
with GET, POST, and DELETE but not with PUT unless the caller somehow knows the next primary key or they provide it themselves... how is this done?
I am going by what I read here: PUT vs POST in REST
The PUT method requests that the enclosed entity be stored under the supplied Request-URI.