Noticed an interesting difference between GET and POST.
GET puts the data in the URL and the browser history remembers it.
POST puts the data in the body and the browser history does not remember it.
This may be subtle but if you are hiding parameters you may want to keep this in mind.