in the future, this should be either POST or GET, not both