Brainfart:

eliminate static Urls, and instead develop a formal "http[Method] formdata" for all
webexposed procedures.

Instead of passing formdata for reports through the form, store them in the session.