parameters are passed in query string instead of post body. probably "content-type: application/x-www-form-urlencoded" should be used somehow