Step1 HTTP: 401
XSRF: ABSENT
Step2 HTTP: 403
Body: {"error":"access_denied","error_description":"Could not verify the provided CSRF token because your session was not found."}