What exactly is an "unauthenticated post"?