added additional security for POST requests