change API calls to use POST body instead of query params