[server] Allow POST on /report