Use of POST vars and remove app_key verification