Must be a POST request.