This is only ever called internally and it's restricted to admin role in web.xml.  What is the threat model here?  That some admin will be tricked into clicking a link that POSTs to /charge_proxy?