Can't create webhook using API

[OctoNezd]

I tried creating webhook by making request to post 'projects/:id/webhook_settings/create', :controller => 'webhook_settings', :action => 'create', :as => :create_webhook. API key is set using X-Redmine-API-Key header. Redmine throws Invalid form authenticity token.. Is there any proper API for that?

[OctoNezd]

Nevermind - managed to get it to work by adding .json to create. However, the returned result is HTML, not json. I assume its a bug?