Use querystring rather than custom headers
This is kinda annoying, but it turns out the forms system doesn't allow you to set custom headers in POST requests.