change GET to POST for /iam