Implement 2 step confirmation in REST API.
User should be forced to pass token (e. g. creation time) to confirm