adding the sling xss post