I've tried it with post as well. I've switch between using a form with CSRF in it, adding it as a header and the SCRIPT inclusion. Nothing seems to work.