endpoint only supports GET, not POST