Possible fix

  • You are using a POST request for step 3. This should be a GET request