moved qwe.xcf, so it dosn't get bundeld to the xpi
send token via POST, since GET is not allowed anymore