done with HEAD and POST request (to ensure POST request are not cached), and i rework the vcl to be more bulletproof.