diff -r a2342f26c9de -r b0b56e0f8c7f server/src/app/Http/Middleware/VerifyCsrfToken.php
--- a/server/src/app/Http/Middleware/VerifyCsrfToken.php	Fri Jan 15 15:27:56 2016 +0100
+++ b/server/src/app/Http/Middleware/VerifyCsrfToken.php	Fri Jan 15 15:35:00 2016 +0100
@@ -19,4 +19,13 @@
     {
         return parent::handle($request, $next);
     }
+
+    /**
+     * The URIs that should be excluded from CSRF verification.
+     *
+     * @var array
+     */
+    protected $except = [
+        'api/*',
+    ];
 }