so it's all my bad for not being more thorough with the request header - i should have known right off the bat