Hi Carlos,
Can you provide the sample code for your POST and PUT request?
I did what you mentioned with regards to disabled CSRF token, but I still got 403 from Android.
I also tested the same payload, request method and it works on REST client, can you shed some light on what's missing on my implementation?