post to /api/<key>/ works as expected