incorrect query syntax causes api to return 404 status when not using client auth.