changed all GETs to POSTs