What might be wrong with the payload format in your REST API authentication request