auth is changed. querystring => header. scaffold post is destroyd.