API stashes can expire, POST body validation, dropped deprecated endpoints