post to django API returns 403 (Forbidden) when authenticated, but able post when not authenticated

Question

I\'m building an app that works as follows:

• Users fill out data on an html form and submit.
• the data is posted onto the API (via Fetch).

This