fixed: use relative urls for POST