Fix security by changing AUTH to POST request