ServiceRequiresLogin in Delphi

yes, you have to provide Access-Token that you have received in login:

login

C:>curl -verbose -X POST “http://localhost:8099/api/login/login” -H “accept: application/json” -H “content-type: application/json” -d “{ "NewParam": "string", "NewParam1": "string"}”

Note: Unnecessary use of -X or --request, POST is already inferred.
*   Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8099 (#0)
> POST /api/login/login HTTP/1.1
> Host: localhost:8099
> User-Agent: curl/7.56.0
> Referer: rbose
> accept: application/json
> content-type: application/json
> Content-Length: 48
>
* upload completely sent off: 48 out of 48 bytes
< HTTP/1.1 200 OK
< Connection: close
< Content-Type: application/json; charset=utf-8
< Content-Length: 0
< Date: Fri, 24 Apr 2020 09:44:44 GMT
< Accept-Encoding: gzip, identity
< Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}
<
* Closing connection 0
sum

C:>curl -verbose -X POST “http://localhost:8099/api/test/Sum” -H “accept: application/json” -H “Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}” -H “content-type: application/json” -d “{ "A": 1, "B": 2}”

Note: Unnecessary use of -X or --request, POST is already inferred.
*   Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8099 (#0)
> POST /api/test/Sum HTTP/1.1
> Host: localhost:8099
> User-Agent: curl/7.56.0
> Referer: rbose
> accept: application/json
> Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}
> content-type: application/json
> Content-Length: 19
>
* upload completely sent off: 19 out of 19 bytes
< HTTP/1.1 200 OK
< Connection: close
< Content-Type: application/json; charset=utf-8
< Content-Length: 1
< Date: Fri, 24 Apr 2020 09:45:06 GMT
< Accept-Encoding: gzip, identity
< Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}
<
3
* Closing connection 0
getdate

C:>curl -verbose -X POST “http://localhost:8099/api/test/getdate” -H “accept: application/json” -H “Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}”

*   Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8099 (#0)
> POST /api/test/getdate HTTP/1.1
> Host: localhost:8099
> User-Agent: curl/7.56.0
> Referer: rbose
> accept: application/json
> Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}
>
< HTTP/1.1 200 OK
< Connection: close
< Content-Type: application/json; charset=utf-8
< Content-Length: 26
< Date: Fri, 24 Apr 2020 09:45:49 GMT
< Accept-Encoding: gzip, identity
< Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}
<
"2020-04-24T09:45:49.774Z"
* Closing connection 0
logoff

C:>curl -verbose -X POST “http://localhost:8099/api/login/logoff” -H “accept: application/json” -H “Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}”

*   Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8099 (#0)
> POST /api/login/logoff HTTP/1.1
> Host: localhost:8099
> User-Agent: curl/7.56.0
> Referer: rbose
> accept: application/json
> Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F}
>
< HTTP/1.1 200 OK
< Connection: close
< Content-Type: application/json; charset=utf-8
< Content-Length: 0
< Date: Fri, 24 Apr 2020 09:46:24 GMT
< Accept-Encoding: gzip, identity
<
* Closing connection 0