Include user access token in api calls
Fix missing & in endpoint and use getRequest