You should inspect your browser's request to see exactly which headers and data it is sending. The best way to do that is to use some proxy like burp, but maybe event browser's console will be good enough.