Be explicit about request method to play nice with CORS