also check POST requests for a 'token' to authenticate the user
bump to version 0.9.6