use git instead of post because of csrf protection