diff --git a/app/Routes/admin.php b/app/Routes/admin.php
index 2b6fa164..f2108873 100644
--- a/app/Routes/admin.php
+++ b/app/Routes/admin.php
@@ -9,7 +9,7 @@ Route::group([
  ], function () {
     Route::resource('airlines', 'AirlinesController');
 
-    Route::match(['get', 'put'], 'airports/fuel', 'AirportController@fuel');
+    Route::match(['get', 'post', 'put'], 'airports/fuel', 'AirportController@fuel');
     Route::resource('airports', 'AirportController');
     Route::match(['get', 'post', 'put', 'delete'], 'airports/{id}/expenses', 'AirportController@expenses');
 
diff --git a/public/js/admin/app.js b/public/js/admin/app.js
index c2064d8a..5cee9759 100644
--- a/public/js/admin/app.js
+++ b/public/js/admin/app.js
@@ -1105,7 +1105,7 @@ eval("/* WEBPACK VAR INJECTION */(function($) {\nvar jquery = __webpack_require_
 /***/ "./resources/js/bootstrap.js":
 /***/ (function(module, exports, __webpack_require__) {
 
-eval("/**\n * Bootstrap any Javascript libraries required\n */\n\nwindow._ = __webpack_require__(\"./node_modules/lodash/lodash.js\");\nwindow.Popper = __webpack_require__(\"./node_modules/popper.js/dist/esm/popper.js\").default;\nwindow.$ = window.jquery = __webpack_require__(\"./node_modules/jquery/dist/jquery.js\");\nwindow.select2 = __webpack_require__(\"./node_modules/select2/dist/js/select2.js\");\nwindow.pjax = __webpack_require__(\"./node_modules/pjax/index.js\");\nwindow.axios = __webpack_require__(\"./node_modules/axios/index.js\");\n\n/**\n * Configure Axios with both the csrf token and the API key\n */\nwindow.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';\nvar token = document.head.querySelector('meta[name=\"csrf-token\"]');\n\nif (token) {\n    window.axios.defaults.headers.common['X-CSRF-TOKEN'] = token.content;\n} else {\n    console.error('CSRF token not found: https://laravel.com/docs/csrf#csrf-x-csrf-token');\n}\n\nvar api_key = document.head.querySelector('meta[name=\"api-key\"]');\nif (api_key) {\n    window.axios.defaults.headers.common['x-api-key'] = api_key.content;\n    window.PHPVMS_USER_API_KEY = api_key.content;\n} else {\n    window.PHPVMS_USER_API_KEY = false;\n    console.error('API Key not found!');\n}\n\n// Container for phpVMS specific functions\nwindow.phpvms = {};//# sourceURL=[module]\n//# sourceMappingURL=data:application/json;charset=utf-8;base64,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\n//# sourceURL=webpack-internal:///./resources/js/bootstrap.js\n");
+eval("/**\n * Bootstrap any Javascript libraries required\n */\n\nwindow._ = __webpack_require__(\"./node_modules/lodash/lodash.js\");\nwindow.Popper = __webpack_require__(\"./node_modules/popper.js/dist/esm/popper.js\").default;\nwindow.$ = window.jquery = __webpack_require__(\"./node_modules/jquery/dist/jquery.js\");\nwindow.select2 = __webpack_require__(\"./node_modules/select2/dist/js/select2.js\");\nwindow.pjax = __webpack_require__(\"./node_modules/pjax/index.js\");\nwindow.axios = __webpack_require__(\"./node_modules/axios/index.js\");\n\n/**\n * Container for phpVMS specific functions\n */\nwindow.phpvms = {};\n\n/**\n * Configure Axios with both the csrf token and the API key\n */\nwindow.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';\nvar token = document.head.querySelector('meta[name=\"csrf-token\"]');\n\nif (token) {\n    window.axios.defaults.headers.common['X-CSRF-TOKEN'] = token.content;\n    window.jquery.ajaxSetup({\n        'X-CSRF-TOKEN': token.content\n    });\n} else {\n    console.error('CSRF token not found: https://laravel.com/docs/csrf#csrf-x-csrf-token');\n}\n\nvar api_key = document.head.querySelector('meta[name=\"api-key\"]');\nif (api_key) {\n    window.axios.defaults.headers.common['x-api-key'] = api_key.content;\n    window.PHPVMS_USER_API_KEY = api_key.content;\n} else {\n    window.PHPVMS_USER_API_KEY = false;\n    console.error('API Key not found!');\n}//# sourceURL=[module]\n//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjozLCJzb3VyY2VzIjpbIndlYnBhY2s6Ly8vLi9yZXNvdXJjZXMvanMvYm9vdHN0cmFwLmpzPzBlNTgiXSwibmFtZXMiOlsid2luZG93IiwiXyIsInJlcXVpcmUiLCJQb3BwZXIiLCJkZWZhdWx0IiwiJCIsImpxdWVyeSIsInNlbGVjdDIiLCJwamF4IiwiYXhpb3MiLCJwaHB2bXMiLCJkZWZhdWx0cyIsImhlYWRlcnMiLCJjb21tb24iLCJ0b2tlbiIsImRvY3VtZW50IiwiaGVhZCIsInF1ZXJ5U2VsZWN0b3IiLCJjb250ZW50IiwiYWpheFNldHVwIiwiY29uc29sZSIsImVycm9yIiwiYXBpX2tleSIsIlBIUFZNU19VU0VSX0FQSV9LRVkiXSwibWFwcGluZ3MiOiJBQUFBOzs7O0FBSUFBLE9BQU9DLENBQVAsR0FBVyxtQkFBQUMsQ0FBUSxpQ0FBUixDQUFYO0FBQ0FGLE9BQU9HLE1BQVAsR0FBZ0IsbUJBQUFELENBQVEsNkNBQVIsRUFBcUJFLE9BQXJDO0FBQ0FKLE9BQU9LLENBQVAsR0FBV0wsT0FBT00sTUFBUCxHQUFnQixtQkFBQUosQ0FBUSxzQ0FBUixDQUEzQjtBQUNBRixPQUFPTyxPQUFQLEdBQWlCLG1CQUFBTCxDQUFRLDJDQUFSLENBQWpCO0FBQ0FGLE9BQU9RLElBQVAsR0FBYyxtQkFBQU4sQ0FBUSw4QkFBUixDQUFkO0FBQ0FGLE9BQU9TLEtBQVAsR0FBZSxtQkFBQVAsQ0FBUSwrQkFBUixDQUFmOztBQUVBOzs7QUFHQUYsT0FBT1UsTUFBUCxHQUFnQixFQUFoQjs7QUFJQTs7O0FBR0FWLE9BQU9TLEtBQVAsQ0FBYUUsUUFBYixDQUFzQkMsT0FBdEIsQ0FBOEJDLE1BQTlCLENBQXFDLGtCQUFyQyxJQUEyRCxnQkFBM0Q7QUFDQSxJQUFNQyxRQUFRQyxTQUFTQyxJQUFULENBQWNDLGFBQWQsQ0FBNEIseUJBQTVCLENBQWQ7O0FBRUEsSUFBSUgsS0FBSixFQUFXO0FBQ1BkLFdBQU9TLEtBQVAsQ0FBYUUsUUFBYixDQUFzQkMsT0FBdEIsQ0FBOEJDLE1BQTlCLENBQXFDLGNBQXJDLElBQXVEQyxNQUFNSSxPQUE3RDtBQUNBbEIsV0FBT00sTUFBUCxDQUFjYSxTQUFkLENBQXdCO0FBQ3BCLHdCQUFnQkwsTUFBTUk7QUFERixLQUF4QjtBQUdILENBTEQsTUFLTztBQUNIRSxZQUFRQyxLQUFSLENBQWMsdUVBQWQ7QUFDSDs7QUFFRCxJQUFNQyxVQUFVUCxTQUFTQyxJQUFULENBQWNDLGFBQWQsQ0FBNEIsc0JBQTVCLENBQWhCO0FBQ0EsSUFBR0ssT0FBSCxFQUFZO0FBQ1J0QixXQUFPUyxLQUFQLENBQWFFLFFBQWIsQ0FBc0JDLE9BQXRCLENBQThCQyxNQUE5QixDQUFxQyxXQUFyQyxJQUFvRFMsUUFBUUosT0FBNUQ7QUFDQWxCLFdBQU91QixtQkFBUCxHQUE2QkQsUUFBUUosT0FBckM7QUFDSCxDQUhELE1BR087QUFDSGxCLFdBQU91QixtQkFBUCxHQUE2QixLQUE3QjtBQUNBSCxZQUFRQyxLQUFSLENBQWMsb0JBQWQ7QUFDSCIsImZpbGUiOiIuL3Jlc291cmNlcy9qcy9ib290c3RyYXAuanMuanMiLCJzb3VyY2VzQ29udGVudCI6WyIvKipcbiAqIEJvb3RzdHJhcCBhbnkgSmF2YXNjcmlwdCBsaWJyYXJpZXMgcmVxdWlyZWRcbiAqL1xuXG53aW5kb3cuXyA9IHJlcXVpcmUoJ2xvZGFzaCcpO1xud2luZG93LlBvcHBlciA9IHJlcXVpcmUoJ3BvcHBlci5qcycpLmRlZmF1bHQ7XG53aW5kb3cuJCA9IHdpbmRvdy5qcXVlcnkgPSByZXF1aXJlKCdqcXVlcnknKTtcbndpbmRvdy5zZWxlY3QyID0gcmVxdWlyZSgnc2VsZWN0MicpO1xud2luZG93LnBqYXggPSByZXF1aXJlKCdwamF4Jyk7XG53aW5kb3cuYXhpb3MgPSByZXF1aXJlKCdheGlvcycpO1xuXG4vKipcbiAqIENvbnRhaW5lciBmb3IgcGhwVk1TIHNwZWNpZmljIGZ1bmN0aW9uc1xuICovXG53aW5kb3cucGhwdm1zID0ge1xuXG59O1xuXG4vKipcbiAqIENvbmZpZ3VyZSBBeGlvcyB3aXRoIGJvdGggdGhlIGNzcmYgdG9rZW4gYW5kIHRoZSBBUEkga2V5XG4gKi9cbndpbmRvdy5heGlvcy5kZWZhdWx0cy5oZWFkZXJzLmNvbW1vblsnWC1SZXF1ZXN0ZWQtV2l0aCddID0gJ1hNTEh0dHBSZXF1ZXN0JztcbmNvbnN0IHRva2VuID0gZG9jdW1lbnQuaGVhZC5xdWVyeVNlbGVjdG9yKCdtZXRhW25hbWU9XCJjc3JmLXRva2VuXCJdJyk7XG5cbmlmICh0b2tlbikge1xuICAgIHdpbmRvdy5heGlvcy5kZWZhdWx0cy5oZWFkZXJzLmNvbW1vblsnWC1DU1JGLVRPS0VOJ10gPSB0b2tlbi5jb250ZW50O1xuICAgIHdpbmRvdy5qcXVlcnkuYWpheFNldHVwKHtcbiAgICAgICAgJ1gtQ1NSRi1UT0tFTic6IHRva2VuLmNvbnRlbnRcbiAgICB9KVxufSBlbHNlIHtcbiAgICBjb25zb2xlLmVycm9yKCdDU1JGIHRva2VuIG5vdCBmb3VuZDogaHR0cHM6Ly9sYXJhdmVsLmNvbS9kb2NzL2NzcmYjY3NyZi14LWNzcmYtdG9rZW4nKTtcbn1cblxuY29uc3QgYXBpX2tleSA9IGRvY3VtZW50LmhlYWQucXVlcnlTZWxlY3RvcignbWV0YVtuYW1lPVwiYXBpLWtleVwiXScpO1xuaWYoYXBpX2tleSkge1xuICAgIHdpbmRvdy5heGlvcy5kZWZhdWx0cy5oZWFkZXJzLmNvbW1vblsneC1hcGkta2V5J10gPSBhcGlfa2V5LmNvbnRlbnQ7XG4gICAgd2luZG93LlBIUFZNU19VU0VSX0FQSV9LRVkgPSBhcGlfa2V5LmNvbnRlbnQ7XG59IGVsc2Uge1xuICAgIHdpbmRvdy5QSFBWTVNfVVNFUl9BUElfS0VZID0gZmFsc2U7XG4gICAgY29uc29sZS5lcnJvcignQVBJIEtleSBub3QgZm91bmQhJyk7XG59XG5cblxuXG4vLyBXRUJQQUNLIEZPT1RFUiAvL1xuLy8gLi9yZXNvdXJjZXMvanMvYm9vdHN0cmFwLmpzIl0sInNvdXJjZVJvb3QiOiIifQ==\n//# sourceURL=webpack-internal:///./resources/js/bootstrap.js\n");
 
 /***/ }),
 
diff --git a/public/js/frontend/app.js b/public/js/frontend/app.js
index dea174a3..78c4809e 100644
--- a/public/js/frontend/app.js
+++ b/public/js/frontend/app.js
@@ -230,7 +230,7 @@ eval("// removed by extract-text-webpack-plugin//# sourceURL=[module]\n//# sourc
 /***/ "./resources/js/bootstrap.js":
 /***/ (function(module, exports, __webpack_require__) {
 
-eval("/**\n * Bootstrap any Javascript libraries required\n */\n\nwindow._ = __webpack_require__(\"./node_modules/lodash/lodash.js\");\nwindow.Popper = __webpack_require__(\"./node_modules/popper.js/dist/esm/popper.js\").default;\nwindow.$ = window.jquery = __webpack_require__(\"./node_modules/jquery/dist/jquery.js\");\nwindow.select2 = __webpack_require__(\"./node_modules/select2/dist/js/select2.js\");\nwindow.pjax = __webpack_require__(\"./node_modules/pjax/index.js\");\nwindow.axios = __webpack_require__(\"./node_modules/axios/index.js\");\n\n/**\n * Configure Axios with both the csrf token and the API key\n */\nwindow.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';\nvar token = document.head.querySelector('meta[name=\"csrf-token\"]');\n\nif (token) {\n    window.axios.defaults.headers.common['X-CSRF-TOKEN'] = token.content;\n} else {\n    console.error('CSRF token not found: https://laravel.com/docs/csrf#csrf-x-csrf-token');\n}\n\nvar api_key = document.head.querySelector('meta[name=\"api-key\"]');\nif (api_key) {\n    window.axios.defaults.headers.common['x-api-key'] = api_key.content;\n    window.PHPVMS_USER_API_KEY = api_key.content;\n} else {\n    window.PHPVMS_USER_API_KEY = false;\n    console.error('API Key not found!');\n}\n\n// Container for phpVMS specific functions\nwindow.phpvms = {};//# sourceURL=[module]\n//# sourceMappingURL=data:application/json;charset=utf-8;base64,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\n//# sourceURL=webpack-internal:///./resources/js/bootstrap.js\n");
+eval("/**\n * Bootstrap any Javascript libraries required\n */\n\nwindow._ = __webpack_require__(\"./node_modules/lodash/lodash.js\");\nwindow.Popper = __webpack_require__(\"./node_modules/popper.js/dist/esm/popper.js\").default;\nwindow.$ = window.jquery = __webpack_require__(\"./node_modules/jquery/dist/jquery.js\");\nwindow.select2 = __webpack_require__(\"./node_modules/select2/dist/js/select2.js\");\nwindow.pjax = __webpack_require__(\"./node_modules/pjax/index.js\");\nwindow.axios = __webpack_require__(\"./node_modules/axios/index.js\");\n\n/**\n * Container for phpVMS specific functions\n */\nwindow.phpvms = {};\n\n/**\n * Configure Axios with both the csrf token and the API key\n */\nwindow.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';\nvar token = document.head.querySelector('meta[name=\"csrf-token\"]');\n\nif (token) {\n    window.axios.defaults.headers.common['X-CSRF-TOKEN'] = token.content;\n    window.jquery.ajaxSetup({\n        'X-CSRF-TOKEN': token.content\n    });\n} else {\n    console.error('CSRF token not found: https://laravel.com/docs/csrf#csrf-x-csrf-token');\n}\n\nvar api_key = document.head.querySelector('meta[name=\"api-key\"]');\nif (api_key) {\n    window.axios.defaults.headers.common['x-api-key'] = api_key.content;\n    window.PHPVMS_USER_API_KEY = api_key.content;\n} else {\n    window.PHPVMS_USER_API_KEY = false;\n    console.error('API Key not found!');\n}//# sourceURL=[module]\n//# sourceMappingURL=data:application/json;charset=utf-8;base64,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\n//# sourceURL=webpack-internal:///./resources/js/bootstrap.js\n");
 
 /***/ }),
 
diff --git a/public/mix-manifest.json b/public/mix-manifest.json
index ff81228d..d96de6dd 100644
--- a/public/mix-manifest.json
+++ b/public/mix-manifest.json
@@ -1,6 +1,6 @@
 {
-    "/js/admin/app.js": "/js/admin/app.js?id=ef1dc6565068527473d9",
-    "/js/frontend/app.js": "/js/frontend/app.js?id=aaeb7d6b95393bb168bd",
+    "/js/admin/app.js": "/js/admin/app.js?id=3ed3c345656238c8deb3",
+    "/js/frontend/app.js": "/js/frontend/app.js?id=e9d1f6af5d93ee637b97",
     "/assets/admin/vendor/paper-dashboard.css": "/assets/admin/vendor/paper-dashboard.css?id=3bbf7dd2a80739ab63b9",
     "/assets/frontend/css/now-ui-kit.css": "/assets/frontend/css/now-ui-kit.css?id=9923ce002ceafb1d740a",
     "/js/admin/vendor.js": "/js/admin/vendor.js?id=1c5ddb087f24b16da40f",
diff --git a/resources/js/bootstrap.js b/resources/js/bootstrap.js
index dccb8720..ae588c4f 100644
--- a/resources/js/bootstrap.js
+++ b/resources/js/bootstrap.js
@@ -24,6 +24,9 @@ const token = document.head.querySelector('meta[name="csrf-token"]');
 
 if (token) {
     window.axios.defaults.headers.common['X-CSRF-TOKEN'] = token.content;
+    window.jquery.ajaxSetup({
+        'X-CSRF-TOKEN': token.content
+    })
 } else {
     console.error('CSRF token not found: https://laravel.com/docs/csrf#csrf-x-csrf-token');
 }
diff --git a/resources/views/admin/aircraft/script.blade.php b/resources/views/admin/aircraft/script.blade.php
index 66bb3459..0bd468b1 100644
--- a/resources/views/admin/aircraft/script.blade.php
+++ b/resources/views/admin/aircraft/script.blade.php
@@ -1,14 +1,24 @@
 @section('scripts')
 <script>
 function setEditable() {
+
+    const token = $('meta[name="csrf-token"]').attr('content');
+
     @if(isset($aircraft))
     $('#expenses a.text').editable({
         emptytext: '0',
         url: '{{ url('/admin/aircraft/'.$aircraft->id.'/expenses') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': token,
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 expense_id: params.pk,
                 name: params.name,
                 value: params.value
@@ -19,12 +29,19 @@ function setEditable() {
     $('#expenses a.dropdown').editable({
         type: 'select',
         emptytext: '0',
-        source: {{ json_encode(list_to_editable(\App\Models\Enums\ExpenseType::select())) }},
+        source: {!! json_encode(list_to_editable(\App\Models\Enums\ExpenseType::select())) !!},
         url: '{{ url('/admin/aircraft/'.$aircraft->id.'/expenses') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': token,
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 expense_id: params.pk,
                 name: params.name,
                 value: params.value
diff --git a/resources/views/admin/airports/script.blade.php b/resources/views/admin/airports/script.blade.php
index 43f8c04a..0a8f3563 100644
--- a/resources/views/admin/airports/script.blade.php
+++ b/resources/views/admin/airports/script.blade.php
@@ -1,14 +1,24 @@
 @section('scripts')
 <script>
 function setEditable() {
+
+    const csrf_token = $('meta[name="csrf-token"]').attr('content');
+
     @if(isset($airport))
     $('#airport-expenses a.text').editable({
         emptytext: '0',
         url: '{{ url('/admin/airports/'.$airport->id.'/expenses') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': csrf_token
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 expense_id: params.pk,
                 name: params.name,
                 value: params.value
@@ -19,12 +29,19 @@ function setEditable() {
     $('#airport-expenses a.dropdown').editable({
         type: 'select',
         emptytext: '0',
-        source: {{ json_encode(list_to_editable(\App\Models\Enums\ExpenseType::select())) }},
+        source: {!! json_encode(list_to_editable(\App\Models\Enums\ExpenseType::select())) !!},
         url: '{{ url('/admin/airports/'.$airport->id.'/expenses') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': csrf_token
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 expense_id: params.pk,
                 name: params.name,
                 value: params.value
@@ -39,7 +56,8 @@ function phpvms_vacentral_airport_lookup(icao, callback) {
         url: BASE_URL + '/api/airports/'+ icao + '/lookup',
         method: 'GET',
         headers: {
-            'x-api-key': PHPVMS_USER_API_KEY
+            'x-api-key': '{{ Auth::user()->api_key }}',
+            'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
         }
     }).done(function (data, status) {
         callback(data.data);
@@ -56,9 +74,16 @@ $(document).ready(function() {
         emptytext: '0',
         url: '{{ url('/admin/airports/fuel') }}',
         title: 'Enter price per unit of fuel',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
+            }
+        },
         params: function(params) {
             return {
+                _method: 'put',
                 id: params.pk,
                 name: params.name,
                 value: params.value
diff --git a/resources/views/admin/flights/scripts.blade.php b/resources/views/admin/flights/scripts.blade.php
index 6048220b..b1bb0c4d 100644
--- a/resources/views/admin/flights/scripts.blade.php
+++ b/resources/views/admin/flights/scripts.blade.php
@@ -8,9 +8,16 @@ function setEditable() {
         emptytext: 'inherited',
         url: '{{ url('/admin/flights/'.$flight->id.'/fares') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 fare_id: params.pk,
                 name: params.name,
                 value: params.value
@@ -28,9 +35,16 @@ $(document).ready(function () {
         mode: 'inline',
         emptytext: '0',
         url: '/admin/flights/{{ $flight->id }}/fields',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 field_id: params.pk,
                 name: params.name,
                 value: params.value
diff --git a/resources/views/admin/subfleets/script.blade.php b/resources/views/admin/subfleets/script.blade.php
index 608fd4a9..45a1ff71 100644
--- a/resources/views/admin/subfleets/script.blade.php
+++ b/resources/views/admin/subfleets/script.blade.php
@@ -1,15 +1,25 @@
 @section('scripts')
 <script>
 function setEditable() {
+
+    const token = $('meta[name="csrf-token"]').attr('content');
+
     $('#aircraft_fares a').editable({
         type: 'text',
         mode: 'inline',
         emptytext: 'inherited',
         url: '{{ url('/admin/subfleets/'.$subfleet->id.'/fares') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': token,
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 fare_id: params.pk,
                 name: params.name,
                 value: params.value
@@ -23,9 +33,16 @@ function setEditable() {
         emptytext: 'inherited',
         url: '{{ url('/admin/subfleets/'.$subfleet->id.'/ranks') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': token,
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 rank_id: params.pk,
                 name: params.name,
                 value: params.value
@@ -37,9 +54,16 @@ function setEditable() {
         emptytext: '0',
         url: '{{ url('/admin/subfleets/'.$subfleet->id.'/expenses') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': token,
+            }
+        },
         params: function (params) {
             return {
+                _method: 'put',
                 expense_id: params.pk,
                 name: params.name,
                 value: params.value
@@ -50,13 +74,20 @@ function setEditable() {
     $('#subfleet-expenses a.dropdown').editable({
         type: 'select',
         emptytext: '0',
-        source: {{ json_encode(list_to_editable(\App\Models\Enums\ExpenseType::select())) }},
+        source: {!! json_encode(list_to_editable(\App\Models\Enums\ExpenseType::select())) !!},
         url: '{{ url('/admin/subfleets/'.$subfleet->id.'/expenses') }}',
         title: 'Enter override value',
-        ajaxOptions: {'type': 'put'},
+        ajaxOptions: {
+            type: 'post',
+            headers: {
+                'x-api-key': '{{ Auth::user()->api_key }}',
+                'X-CSRF-TOKEN': token,
+            }
+        },
         params: function (params) {
             console.log(params);
             return {
+                _method: 'put',
                 expense_id: params.pk,
                 name: params.name,
                 value: params.value