changed to use POST request