Why are you passing `sudo` parameter in body? 
Shouldn't it be in query uri as per docs: https://github.com/gitlabhq/gitlabhq/tree/master/doc/api#sudo?