use POST instead of GET in user settings API