I'm not sure whether you'd still have access to cookies, but it's entirely feasible to include a script which will then submit the POST request.