removed curl verbose to avoid credential from being logged