changed parameters to be in request body instead of head