let's switch to explicitly require POST, and to use `req.FormValue(key)` so this handles multipart forms as well.