Calls to modify methods are not allowed when user is authenticated using session cookie.

Hi Tripp,

This is configurable, though we typically discourage enabling this in production for security reasons. If you're interested in pursuing this further, I would suggest contacting Support as you mentioned.