All calls to the api must include a _token parameter to validate the call.
http://todaycms-api.herokuapp.com/?_token=XXXXXXXXXXXX
This guide will not include the _token in the sample calls. It is implied that it must be included.