Fixed bugs with payload in POST and changed access to use API tokens