bad authentication always aborts api request