POSTing cards puts api key in header
[#62589212] check for compression and read stream appropriately