I'm betting this would still pass if it was "post[creat". Just string matching on the HTML output.