adding post on mysql to secure api demo