"security" is not explained anywhere: security how? this requires an X-CSRF-Token header, so that's important information. 
```
Requires a POST X-CSRF-Token header with value ...
```