Allow API token from post body