Follow up to my own post
the problem seems to be, that the data get's sent as normal HTTP Post, and NOT as https... found this out when running in debug mode and then dumped out the variable content...
now.. how can I make sure that what I want to be send gets sent encrypted?