no, token is in the headers {'Authorization': '…'}

also its BODY {'post': 'whatever'}