handling POST requests (#3)