Covert to POST method and remove HTTP auth.
Don't static cache $css as there are instances where this may be called twice and needs to be executed.
Add API doc.