the verb wasn’t being set for web client, thus non GETs would probably always fail