I'd also double check the restlet url, assuming that's right it may be a signature problem with the payload. IIRC the signature includes something about the payload?