changed ajax request to POST