daux.io/docs/cms/01_API/01_Authentication.md

All calls to the api must include a _token parameter to validate the call.

http://todaycms-api.herokuapp.com/?_token=XXXXXXXXXXXX

This guide will not include the _token in the sample calls. It is implied that it must be included.