GET works disguised in POST