I have headless cms Payload and want to display a list of posts. But looks like it requests cookie authentication. I have found the disableLocalStrategy flag but It does not work I’m making postman request and getting the "You are not allowed to perform this action." error.