Bad Request: missing originalUrl parameter, non-authenticated request