Ah understood. So the api_username and api_key in the query parameters and the rest in the post body.