When working with a POST request, you will need to pass a Cross-Site Request Forgery (CSRF) token if you are authenticating with a session cookie. The X-CSRF-Token header is required when using a session cookie to prevent accidental API requests.

If you are using the cookie provider for authentication, you will need to request a CSRF token from the /session/token route:

curl -X GET http://127.0.0.1:8888/session/token