## Bug description

Since users can now be part of multiple projects, the `get_team_from_token` function used in capture and decide endpoints cannot work reliably with personal API keys. These endpoints should be e.g. nested under `/api/projects/:project_id` _or_ should accept `project_id` in request body.

#### *Thank you* for your bug report – we love squashing them!

posthog/api/test/test_personal_api_keys.py
TESTS_API = True
    TESTS_FORCE_LOGIN = False
    def test_no_key(self):
        response = self.client.get("/api/dashboard/")
        self.assertEqual(response.status_code, 403)
    def test_header_resilient(self):