Post with nested relations

it’s fine as this request is done on backend side and token is not public