refactor from custom HTTP-Entity to custom body because Auth-Header depends on Access-Grant which is only set when the request is queued