Move password & content into POST body