spSiteUrl and spAppToken can now be specified via body and params