Restricted token endpoint to HTTP POST