Please use vars_post unless there isn't a good reason to don't use it. Guidelines about the usage of HttpClient can be found here: https://github.com/rapid7/metasploit-framework/wiki/How-to-Send-an-HTTP-Request-Using-HTTPClient