http-only post-me-anything script, for testing