changed back to POST as it wasn't sending the JSON body