title: Why does post request cause forbidden error?
body: <p>Here is my code:</p>
  
  <p>Controller:</p>
  
  <pre><code>@PostMapping("/create")
      public ResponseEntity&lt;?&gt; createUser(@RequestBody UserExternalResource newUser) {
          try {
              LOGGER.info("Incoming request to create a user: {}", newUser);
              return userService.createUser(newUser);
          } catch (Exception e) {
              LOGGER.error("Error create user: " + newUser + ". Message: " + e.getMessage(), e);
              return new ResponseEntity&lt;&gt;(new ResponseResource("Error creating user!"), HttpStatus.INTERNAL_SERVER_ERROR);
          }
      }
  </code></pre>
  
  <p>Request body:</p>
  
  <pre><code>{
      "user" : "John",
      "username" : "john1"
  
  }
  </code></pre>
  
  <p>When i try to send this request with postman i get 403 Forbidden error.</p>
  
  <p>Response from Postman console:</p>
  
  <pre><code>POST /e/api/user/create
  Content-Type: text/plain
  cache-control: no-cache
  Postman-Token: b6590554-b54e-4935-b0c2-bc43857b3dc1
  User-Agent: PostmanRuntime/7.6.0
  Accept: */*
  Host: localhost:8500
  cookie: EXAMPLE SERVICE-SESSIONID=3TWT113hsJ0e1LVQEDlQqp69O6U8VZx-7sFSyH63
  accept-encoding: gzip, deflate
  content-length: 284
  {
   "user" : "John",
   "username" : "john1"
   }
  HTTP/1.1 403
  status: 403
  Expires: 0
  Cache-Control: no-cache, no-store, max-age=0, must-revalidate
  X-XSS-Protection: 1; mode=block
  Pragma: no-cache
  Date: Wed, 06 Feb 2019 15:11:55 GMT
  Connection: keep-alive
  X-Content-Type-Options: nosniff
  Transfer-Encoding: chunked
  Content-Type: application/json;charset=UTF-8
  {"timestamp":1549465915019,"status":403,"error":"Forbidden","message":"Access Denied","path":"/e/api/user/create"}
  </code></pre>
  
  <p>Does anyone know what could be problem?</p>