Bad Request: invalid originalUrl parameter, non-authenticated request