Looks like your API is playing fast and loose with errors and security. Time to tighten up those definitions and responses before things get out of hand!