use proper auth header when posting from build page
for real, use the right headers
debug star stuff
use correct content type
use the api client in api tests
send a json string