I don’t think you are doing your auth correctly. More, auth goes into header, not parameters.