Fix authenticated POST

'data' could not be found, at least under chrome, without the 'self.' prefix.