Fix POST /data to use the new storage and make js send a token

No test for this yet :(