How are you authenticating? Can you post some details around your curl/postman request?