Post feedback requires token

Also GET feedback from users.