Allow unsigned POST requests