Use POST instead of GET for the /xfer method.  Other bug fixes in the
URL parser.