But I get 'bad request' back, am I doing it wrong?