Don't we need to keep the `GET` version for reliers (minus the FxA assertion)?