GET requests may leave sensitive information in the Pythia web server's logs. :( Should be POST instead.