make posting work (it needs refactoring so badly though!)

assuming you've authenticated via app_auth.auth(entity) and called
app_auth.finish(), this works!