Unless the order of parameters is important (which is not usually the case with these kinds of exploits), you should send them in the `'vars_post'` Hash instead of building the string yourself. Doing it that way allows `HttpClient` to randomize more things.