shutdown and start with API

for (most) post request you need to provide the CSRFToken (as 'CSRFToken' header) as well. you get it from the ticket API call