Darn!! I am stuck again.
I tried to post a message on behalf of a user who I registered via DIRECTADD
Unfortunately I need to log them in first before they can post.
The login interface requires a username and password. I can't obtain a CSRF token without logging them in. And, I can't get a draft posting without a CSRF for the user.
Any ideas anyone?