refs #14: accept POST