Fixed widget.xml, post command works, CAS token works