Allow API token from post body
Allow API token from post body