REQUEST_METHOD should be POST