Error - Missing CSRF token cookie

[geoidesic]

I'm trying to implement CRUD. Via Postman it works for GET but POST is failing with Missing CSRF token cookie. I've tried disabling CSRF tokens as per https://book.cakephp.org/3.0/en/controllers/components/csrf.html#disabling-the-csrf-component-for-specific-actions however, I'm not sure this is good practice and it doesn't seem to work anyway.

I've been trying to follow this tutorial but can't get it to work: http://www.bravo-kernel.com/2015/04/how-to-build-a-cakephp-3-rest-api-in-minutes/ due to the CSRF issues.

Any ideas?