Using Postman to test a RESTlet, I was getting "INVALID_LOGIN_ATTEMPT", deleting the NS_ROUTING_VERSION cookie/header fixed it ¯\_(ツ)_/¯