All POST/PUT/DELETE operations should use verification middleware that takes in an authentication token in the header.