refs #30273 @4h30m use post instead of get for token requests