explicitly check post; use FormValue