check encryption on POST-requests only