change framework secret, change GET routes to GET/POST route