POST, X-CSRFToken, model created, save in backend is functional