I reviewed this part. Actually, auth req is a POST to /login & the key is not going in with submission. This parameter should be removed for now. Will update the code. Thanks.