Modified the get user object call to be a POST and requiring a session token