The query is getting carried in the POST request body (with the appropriate content type set). Got a better convention?