master MOD: allow POST even if not logged on (need to empty permissions in settings.py too)