As far as I know those parameters should work, but it might be off because you are not sending the expected format (the API likes JSON, not a URI parameter string). A second problem may be that just over a year ago they stripped some of the rights from this particular application ID. The one that I noticed is since then session renewal no longer functions and you must login again after 15 minutes have passed, but not with every request because then you will go past the session count limit.